-- As you can see, if your DNS @ record points to the same IP address as your DNS A record for www.yourdomain.com, then that autodiscover request will go to your WWW site, where it finds a certificate for a secure website that has no relation to your production site, and so it throws the stupid error.

I cannot believe how stupid autodiscover is for that reason (among others).

If you simply browse to https://yourdomain.com - you'll get to the same site, same cert that is showing up in your autodiscover SSL error popups.

How to fix it? Well, what I've done is point the @ record to my exchange server, or if that creates website problems, I create a new web server instance listening on port 80 only, with the domain of 'yourdomain.com' then create the full path it is looking for:

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Attempting to resolve the host name kkbcpa.com in DNS.
The host name resolved successfully.

Additional Details

IP addresses returned: 167.68.20.163
Elapsed Time: 37 ms.
Testing TCP port 443 on host kkbcpa.com to ensure it's listening and open.
The specified port is either blocked, not listening, or not producing the expected response.
Tell me more about this issue and how to resolve it

Attempting to resolve the host name autodiscover.kkbcpa.com in DNS.
The host name resolved successfully.

Additional Details

IP addresses returned: 167.68.20.163
Elapsed Time: 73 ms.
Testing TCP port 443 on host autodiscover.kkbcpa.com to ensure it's listening and open.
The specified port is either blocked, not listening, or not producing the expected response.
Tell me more about this issue and how to resolve it

Additional Details

A network error occurred while communicating with the remote host.
Elapsed Time: 1314 ms.
Attempting to contact the Autodiscover service using the HTTP redirect method.
The attempt to contact Autodiscover using the HTTP Redirect method failed.

Additional Details

Elapsed Time: 199 ms.

Test Steps

Attempting to resolve the host name autodiscover.kkbcpa.com in DNS.
The host name resolved successfully.

Elapsed Time: 71 ms.
The Microsoft Connectivity Analyzer is checking the host autodiscover.kkbcpa.com for an HTTP redirect to the Autodiscover service.
The Microsoft Connectivity Analyzer failed to get an HTTP redirect response for Autodiscover.

Additional Details

The URL specified in the location HTTP header was not HTTPS. URL: http://www.autodiscover.kkbcpa.com/Autodiscover/Autodiscover.xml
Elapsed Time: 118 ms.
Attempting to contact the Autodiscover service using the DNS SRV redirect method.
The Microsoft Connectivity Analyzer failed to contact the Autodiscover service using the DNS SRV redirect method.

Additional Details

Elapsed Time: 21 ms.

Test Steps

Attempting to locate SRV record _autodiscover._tcp.kkbcpa.com in DNS.
The Autodiscover SRV record wasn't found in DNS.
Tell me more about this issue and how to resolve it